Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/ZhSUJKkPjO4ZH-OEy6-awpztQUg.roa
File: ZhSUJKkPjO4ZH-OEy6-awpztQUg.roa (raw, json)
Hash identifier: GJPwReUaj4fMFu2Vr7c4yDGK62/0OK7bUVhp2Nk+bX8=
Subject key identifier: 66:14:94:24:A9:0F:8C:EE:19:1F:E3:84:CB:AF:9A:C2:9C:ED:41:48
Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial: 01867024FC5D87FE92D066764667C00B18B8
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/ZhSUJKkPjO4ZH-OEy6-awpztQUg.roa
Signing time: Mon 20 Feb 2023 18:45:17 +0000
ROA not before: Mon 20 Feb 2023 18:45:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208683
IP address blocks: 45.89.132.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:70:24:fc:5d:87:fe:92:d0:66:76:46:67:c0:0b:18:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Validity
Not Before: Feb 20 18:45:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66149424a90f8cee191fe384cbaf9ac29ced4148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:75:4b:f7:e2:b9:25:b5:db:e6:b5:6f:93:08:
7b:14:15:1c:7f:d2:75:80:17:63:98:80:43:67:4d:
a4:02:64:f0:ac:e1:03:a0:88:eb:4e:f3:3b:bb:c5:
f4:a7:1e:f9:55:5b:24:62:38:1b:ef:30:ae:55:f7:
55:4b:ef:87:0f:cf:45:e1:ae:6b:00:3f:c3:1d:7a:
b2:9b:16:a5:65:5c:a2:91:52:23:9e:73:0c:eb:8a:
07:c8:8d:c5:a5:7d:2a:d8:3b:28:1c:67:1d:2f:b4:
d0:93:7e:fa:56:dd:af:1e:c2:70:6f:bb:b6:0e:e4:
a9:61:ae:a9:14:0b:c6:fd:1c:92:8b:2b:62:50:37:
f7:6b:21:48:99:44:96:78:c8:82:d5:ea:e0:21:86:
94:0e:32:be:b2:f0:32:05:8a:c0:d1:6f:86:57:e1:
63:12:df:98:da:6e:42:c9:18:ad:04:77:fb:e1:cf:
de:cd:c8:40:1b:57:ae:02:8f:0a:bd:53:b8:52:29:
1e:40:61:d5:c5:49:90:cb:82:b1:14:57:79:94:c6:
85:d9:7a:91:b8:c9:0d:22:f5:a5:4f:e4:4e:31:a3:
60:1e:16:f5:79:da:42:ea:01:c3:4c:02:57:ca:e3:
2d:ea:f5:9f:4e:0a:d2:d0:3a:13:06:c4:a8:7e:68:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:14:94:24:A9:0F:8C:EE:19:1F:E3:84:CB:AF:9A:C2:9C:ED:41:48
X509v3 Authority Key Identifier:
keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/ZhSUJKkPjO4ZH-OEy6-awpztQUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.132.0/22
Signature Algorithm: sha256WithRSAEncryption
61:0b:a7:ec:b3:24:d8:7d:c9:69:c4:82:2b:e4:f3:8f:49:f8:
24:69:99:5d:db:80:ef:0e:de:e3:e1:10:6f:3c:cc:be:cf:2c:
03:a9:81:d0:67:91:69:18:9e:41:c5:dc:76:da:09:25:ef:80:
2c:76:c8:00:01:a7:ec:c8:e3:8b:d9:76:b6:e7:23:e6:f7:97:
a2:68:6e:de:46:e0:e1:70:48:0d:ff:e9:1e:31:17:3c:af:a5:
56:83:3d:0d:d3:71:d0:0f:17:c7:7f:7f:40:bd:39:c1:55:d9:
2e:8b:a2:03:59:ed:1c:e5:1b:b9:68:80:07:e4:b9:0a:27:83:
5d:6e:26:49:8c:d6:a4:1b:1f:5e:65:48:42:16:9a:85:aa:c2:
6a:85:28:46:bf:2d:6a:28:7b:02:69:0f:b2:ba:5c:3a:01:d5:
1a:b7:27:d2:ec:7f:e0:20:6e:e8:0d:89:32:a8:94:00:36:0c:
a2:cd:9b:2d:42:48:44:30:e9:27:21:1e:57:24:ac:97:7e:6a:
64:57:4f:c3:b2:94:01:49:98:cf:f4:2b:0d:8d:97:0f:7d:f8:
5f:3a:c7:d2:89:ed:53:98:4f:7e:d1:4b:a8:9d:20:9f:6d:92:
e3:82:f6:fd:4d:31:35:6f:83:7d:44:24:dc:6c:79:cc:98:e2:
91:16:a3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:07 2023 by rpki-client on console-fra.rpki-client.org